Dear User,
Pursuant to Article 13 of the EU Regulation No. 2016/679 (hereinafter "GDPR"), we inform you that the data that you provide will be processed using methods and procedures aimed at ensuring that personal data are processed in compliance with fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to privacy and security, personal identity and the right to protection of personal data.

It should be kept in mind that ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; (Article 4 of the GDPR).

1- Subject of the processing
The data processed by Elma Research S.r.l. relate to:

  • Data collected automatically. The computer systems and the applications dedicated to the functioning of this website detect, during their normal functioning, some data (the transmission of which is implicit in the use of Internet communication protocols), potentially associated with identifiable users. The collected data includes the IP addresses and the domain names of the computers used by the users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters concerning the operating system, the browser and the computer environment used by the user. These data are processed, for the time that is strictly necessary, for the sole purpose of obtaining statistical information on the use of the website and to check its smooth operation. The provision of these data is mandatory, as it is directly related to the web-browsing experience.

    The voluntary submission of e-mails by you to our e-mail addresses does not require further information or requests for consent.

2 - Legal basis of the processing
The legal basis of this processing lies in the legitimate interests pursued by the Data Controller (as per Article 6.1, letter f) of the GDPR).

3 - Purposes of the processing
Personal data are processed for the sole purpose of managing and improving your browsing experience.

4 - Processing method
The personal data you provide will form the subject of the processing operations in compliance with the aforementioned regulations and the confidentiality obligations that inspire the activity of the Data controller. The data will be processed with both computer tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 paragraph 1f.) of the GDPR.

The processing is limited to the following operations and with the following methods:

  • collection of data from the data subject;

  • registration and processing on a computerised medium;

  • organisation of the archives in a mainly automated manner.

The data in question will not be disseminated, while they may be disclosed to public or private subjects operating within the scope of the purposes described above.

5 - Data storage
The data collected will be stored for no longer than is necessary for the purposes for which the personal data are processed (“storage limitation principle”, Article 5 GDPR).

6 - Accessing the processing
The data could be made accessible, for the purposes set out in point No. 3 to third-party partners of the Data Controller.

7 -  Data disclosure
The data will not be disclosed to unauthorised third parties or disseminated in any way. To this end, the data are processed using the appropriate security measures to prevent unauthorised access to data by third parties and to ensure their confidentiality.

8 - Data transfer
The management and storage of personal data will be carried out on European Union-based servers of the Data Controller and/or third-party companies tasked and duly appointed as Data Processors.

The data will not be transferred outside the European Union.

9 - Nature of the provision of data and consequences of refusing to respond
The provision of data for the purposes established in point 3 is mandatory. If the data are not provided, it will not be possible to browse this website.

10 - Rights of the data subject
According to the provisions of the GDPR, the data subject has the following rights vis-à-vis the Data Controller:

  • to obtain confirmation as to whether or not personal data are being processed and, if it is, to obtain access to the personal data (Right of access, Article 15);

  • to obtain the rectification of inaccurate personal data concerning him or her without undue delay (Right of rectification Article 16);

  • to obtain the deletion of personal data concerning him or her without undue delay and the Data controller is obliged to delete the personal data without undue delay, if certain conditions are met (Right to be forgotten Article 17);

  • to obtain the restriction of processing in certain cases (Right to restriction of processing Article 18);

  • to receive the personal data that concerns him or her provided in a structured, commonly-used and machine-readable format and to have the right to transmit such data to another Data Controller, without hindrance from the data controller to which the personal data has been provided, in certain cases (Right to data portability Article 20);

  • to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her (Right to object Article 21);

  • to receive, without undue delay, notification of the personal data breach from the Data Controller (Article 34);

  • to withdraw the consent expressed at any time (Conditions for consent Article 7).

Where applicable, in addition to the rights established in Articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), the person concerned has the right to complain to the Guarantor Authority.

11- How to exercise the rights
If the Data Subject wishes to exercise his or her rights, he or she may contact the data controller at the email address: compliance@elmaresearch.com

12 - Data Controller
The data controller is Elma Research Srl - Via Felice Casati 32, Milano Tel. 02 00631801- P.IVA 06191320966.

The list of data processors is available at the registered office of the aforementioned owner.
DPO: Frareg S.r.l. Viale Jenner 38, 20159 Milan, Tel. 02 69010030
Contact person: Mr. Barbosa. E-mail dpo@frareg.com

13 - Update of this information
This information may change. Any substantial changes shall be transmitted to the data subjects by notice or publication on the company website.